Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/5Sj0HZRhEVyqGW_OCYXic2uDp-0.roa
File: 5Sj0HZRhEVyqGW_OCYXic2uDp-0.roa (raw, json)
Hash identifier: N3XiQz2godK3RJjGqxKe3FRaRgHWPnZxgm0hCptkkA8=
Subject key identifier: E5:28:F4:1D:94:61:11:5C:AA:19:6F:CE:09:85:E2:73:6B:83:A7:ED
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AEB8FFB
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/5Sj0HZRhEVyqGW_OCYXic2uDp-0.roa
Signing time: Sat 01 Jan 2022 13:57:48 +0000
ROA not before: Sat 01 Jan 2022 13:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24985
IP address blocks: 217.30.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720080891 (0x2aeb8ffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e528f41d9461115caa196fce0985e2736b83a7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:47:36:c6:7c:c8:f7:77:8e:83:af:7a:af:
e4:0c:c8:48:f7:f4:56:07:02:be:08:d3:0a:61:02:
d1:f3:39:81:45:8d:c4:35:4e:c7:84:a9:4e:4d:36:
6a:d0:cf:b7:4c:e2:19:f5:7b:de:09:a7:4c:3f:8c:
37:7e:6d:fa:b8:5a:89:bd:63:74:b0:11:55:3a:55:
25:d9:0a:29:77:55:b6:c9:04:83:ee:ee:91:32:89:
57:7f:64:7f:44:d3:ad:35:ed:e1:b9:4e:75:95:21:
20:09:bd:78:e6:cd:da:b7:7e:ca:a8:bc:49:af:b8:
64:eb:4e:40:84:c6:29:c5:d4:58:8e:29:31:2d:68:
3d:d6:0d:98:77:d9:56:dd:f1:35:d3:6f:35:af:8a:
5b:21:c4:40:0c:70:2d:5a:1e:1d:11:e3:f7:10:a9:
0f:31:4b:46:ab:dc:a8:e5:04:e8:1b:85:d4:a6:89:
79:fa:15:18:10:f2:15:80:df:cd:9c:00:7d:58:17:
d3:2e:ad:8c:96:64:8e:e8:a5:54:61:8e:e8:da:a3:
3d:6a:c0:42:3f:b9:e7:66:67:b4:fc:45:b2:05:8e:
5d:ef:3a:b4:e8:13:bc:60:5d:e3:af:8d:15:2a:8a:
fa:99:8c:5a:12:e1:47:5a:4e:d0:e4:4c:6d:0e:9b:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:F4:1D:94:61:11:5C:AA:19:6F:CE:09:85:E2:73:6B:83:A7:ED
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/5Sj0HZRhEVyqGW_OCYXic2uDp-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.30.159.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:74:b2:7a:c5:ba:da:f9:7b:1d:31:30:b4:5f:b3:72:87:7c:
1d:74:aa:ae:23:98:96:c2:c1:29:42:03:12:2b:bc:97:d2:64:
03:6d:8a:d7:45:51:c0:93:8b:a8:66:5b:45:9a:35:f3:b7:2d:
0b:9b:65:e4:9f:44:79:a7:67:b6:ab:b2:1d:53:8a:8f:3e:a3:
02:fd:97:9b:e5:65:82:37:15:6f:5c:7f:94:4b:69:7c:bb:52:
20:8d:b4:1b:8e:57:9c:be:c2:04:b9:f8:c1:02:f2:f7:90:93:
d9:18:9d:ae:0c:12:21:04:49:27:50:bb:b0:b2:cb:12:61:a1:
11:0a:38:c0:68:70:f9:81:f5:4b:bc:33:66:87:12:a0:02:6d:
34:ac:0f:ff:53:85:85:fb:9e:bf:97:1f:29:28:80:58:49:81:
93:5e:c9:e9:97:4b:56:56:bb:10:e6:c2:4d:b3:d7:1f:75:e9:
10:e1:a4:25:06:4d:6c:d2:8b:b7:76:ee:e9:91:a0:63:cd:59:
ca:be:cd:d6:e2:b9:7f:03:49:7a:69:46:38:55:11:20:b8:2f:
96:15:4b:23:2f:cd:dc:1d:ee:09:18:4d:62:4f:3d:d6:6e:ee:
db:19:56:72:77:46:49:d6:e9:fc:ef:e6:bb:78:84:0d:08:4b:
10:90:a0:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKuuP+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTc0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTUyOGY0MWQ5NDYx
MTE1Y2FhMTk2ZmNlMDk4NWUyNzM2YjgzYTdlZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1SRzbGfMj3d46Dr3qv5AzISPf0VgcCvgjTCmEC0fM5gUWN
xDVOx4SpTk02atDPt0ziGfV73gmnTD+MN35t+rhaib1jdLARVTpVJdkKKXdVtskE
g+7ukTKJV39kf0TTrTXt4blOdZUhIAm9eObN2rd+yqi8Sa+4ZOtOQITGKcXUWI4p
MS1oPdYNmHfZVt3xNdNvNa+KWyHEQAxwLVoeHRHj9xCpDzFLRqvcqOUE6BuF1KaJ
efoVGBDyFYDfzZwAfVgX0y6tjJZkjuilVGGO6NqjPWrAQj+552ZntPxFsgWOXe86
tOgTvGBd46+NFSqK+pmMWhLhR1pO0ORMbQ6bqKsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTlKPQdlGERXKoZb84JheJza4On7TAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
LzVTajBIWlJoRVZ5cUdXX09DWVhpYzJ1RHAtMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANkenzANBgkqhkiG9w0BAQsFAAOC
AQEAbHSyesW62vl7HTEwtF+zcod8HXSqriOYlsLBKUIDEiu8l9JkA22K10VRwJOL
qGZbRZo187ctC5tl5J9EeadntquyHVOKjz6jAv2Xm+VlgjcVb1x/lEtpfLtSII20
G45XnL7CBLn4wQLy95CT2RidrgwSIQRJJ1C7sLLLEmGhEQo4wGhw+YH1S7wzZocS
oAJtNKwP/1OFhfuev5cfKSiAWEmBk17J6ZdLVla7EObCTbPXH3XpEOGkJQZNbNKL
t3bu6ZGgY81Zyr7N1uK5fwNJemlGOFURILgvlhVLIy/N3B3uCRhNYk891m7u2xlW
cndGSdbp/O/mu3iEDQhLEJCgqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org